Tools·Datenschutzkonferenz (DSK)EN
Export
Standard Data Protection Model (SDM), German DPAs
The German supervisory authorities’ method for turning the GDPR’s requirements into technical and organisational measures, through seven protection goals (data minimisation, availability, integrity, confidentiality, unlinkability, transparency, intervenability), with a catalogue of reference measures.
When to use itYou must justify the technical and organisational measures of a system in a DPIA or an audit.
- Published by
- Datenschutzkonferenz (DSK) (supervisory authority)
- Written for
- Germany
- For
- DPOs and privacy officers, controllers, developers
- Cost
- free
- Languages
- German, English
- Provisions
- GDPR Art. 5, GDPR Art. 25, GDPR Art. 32
View the standarddatenschutzzentrum.de
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
CNIL CNIL GDPR guide for developers The CNIL’s open guide for developers in eighteen factsheets: identifying personal data, preparing a project, securing the environment and code, minimising collection, managing… developer ·open source
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK ·checklist
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.… checklist
EDPB Checklist for AI auditing (EDPB Support Pool of Experts) An end-to-end, socio-technical checklist for auditing an algorithm against data protection law, written by an external expert for the EDPB’s Support Pool of Experts at the AEPD’s… checklist
Datatilsynet (NO) Datatilsynet checklist for businesses (Norway) The Norwegian DPA’s checklist of the duties a business has under the GDPR (applicable in Norway through the EEA Agreement), each point linking to the authority’s guidance. NO ·checklist
ENISA ENISA: Data protection engineering ENISA’s report on the techniques that put data protection by design into practice: anonymisation and pseudonymisation, data masking, privacy-preserving computation,… guide